Processing of Personal and Sensitive Personal Data
The definition of processing under the Data Protection Act is wide and covers any of the following operations:
collection, recording, receipt, ...
storage, archiving, filing, retention, ...
display, scanning, review, ...
deletion, destruction, ...
editing, updating, modification, ...
copying, transmission, transfer, ...
loss, mislaying, misdirection.
That is, if you have personal data about a living individual, then you are processing that personal data about that individual, and the processing is subject to the terms of the Data Protection Act.